Estimation of aggregated costs

This is a placeholder-page for the full legal text of the regulator techincal standard (RTS) on estimation of aggregated costs, supplementing DORA. It was submitted by the ESAs to the European Commission in January 2024 as mandated by Article 11(11) of DORA. It is expected to become applicable on 17 January 2025 along with DORA.

Until we publish the full legal text here, please find the draft RTS on ESMA’s web page or the adopted regulation on the EC’s web page..

The RTS on estimation of aggregated costs aims to standardize the estimation of aggregated annual costs and losses arising from major ICT-related incidents, aligning with the requirements of Regulation 2022/2554 (DORA). It seeks to ensure consistency and comparability across incident reporting mandates, minimizing reporting burdens for financial entities by applying proportional criteria for incident classification.